# openbabel (PyPI) vulnerabilities 24 known vulnerabilities (12 critical, 2 high, 10 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pypi.org/project/openbabel/ ## Advisories (24) ### [CVE-2026-3408](https://cve.now/CVE-2026-3408): Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereference - Severity: Medium 5.3 - Published: Mar 2, 2026 - Affected: fixed in 3.2.0. ### [CVE-2026-2705](https://cve.now/CVE-2026-2705): Open Babel MOL2 File atom.h SetFormalCharge out-of-bounds - Severity: Medium 5.3 - Published: Feb 19, 2026 - Affected: fixed in 3.2.0. ### [CVE-2026-2704](https://cve.now/CVE-2026-2704): Open Babel CIF File transform3d.cpp DescribeAsString out-of-bounds - Severity: Medium 5.3 - Published: Feb 19, 2026 - Affected: fixed in 3.2.0. ### [CVE-2025-11000](https://cve.now/CVE-2025-11000): Open Babel PQSformat.cpp ReadMolecule null pointer dereference - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10999](https://cve.now/CVE-2025-10999): Open Babel cacaoformat.cpp SetHilderbrandt null pointer dereference - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10998](https://cve.now/CVE-2025-10998): Open Babel chemkinformat.cpp ReadReactionQualifierLines null pointer dereference - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10997](https://cve.now/CVE-2025-10997): Open Babel chemkinformat.cpp CheckSpecies heap-based overflow - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10996](https://cve.now/CVE-2025-10996): Open Babel smilesformat.cpp ParseSmiles heap-based overflow - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10995](https://cve.now/CVE-2025-10995): Open Babel zipstreamimpl.h underflow memory corruption - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2025-10994](https://cve.now/CVE-2025-10994): Open Babel gamessformat.cpp ReadMolecule use after free - Severity: Medium 4.8 - Published: Sep 26, 2025 - Affected: fixed in 3.2.0. ### [CVE-2022-43607](https://cve.now/CVE-2022-43607): An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit… - Severity: High 8.1 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46290](https://cve.now/CVE-2022-46290): Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46289](https://cve.now/CVE-2022-46289): Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46295](https://cve.now/CVE-2022-46295): Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open… - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46294](https://cve.now/CVE-2022-46294): Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open… - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46293](https://cve.now/CVE-2022-46293): Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open… - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46292](https://cve.now/CVE-2022-46292): Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open… - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46291](https://cve.now/CVE-2022-46291): Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open… - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-41793](https://cve.now/CVE-2022-41793): An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-42885](https://cve.now/CVE-2022-42885): A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-44451](https://cve.now/CVE-2022-44451): A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-46280](https://cve.now/CVE-2022-46280): A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-43467](https://cve.now/CVE-2022-43467): An out-of-bounds write vulnerability exists in the PQS format coord\_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. ### [CVE-2022-37331](https://cve.now/CVE-2022-37331): An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. - Severity: High 7.3 - Published: Jul 21, 2023 - Affected: fixed in 3.2.0. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/openbabel Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.